Loading…
This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
August 22nd - 24th in Toronto, Canada
Register Now for LinuxCon+ContainerCon North America 2016!
View analytic
Wednesday, August 24 • 2:15pm - 3:05pm
User Namespace and Seccomp Support in Docker Engine - Paul Novarese, Docker

Sign up or log in to save this to your schedule and see who's attending!

Isolation in Docker is mainly accomplished via cgroups and namespaces. User namespaces are the newest namespace to be supported by the Docker engine, and allow users to run Containers as without elevated privileges, which has been a longstanding shortcoming and frequent target of both user frustration and feature requests. In addition, Seccomp support adds a new method of containment for running Containers by providing both whitelist and blacklist based Controls of system calls that are permitted and/or forbidden for containerized processes.

In this session, we’ll look at these new features, examine basics of configuration, and do some live demos to see them in action.

Speakers
avatar for Paul Novarese

Paul Novarese

Technical Account Manager, Docker, Inc.
Paul has been working in the ops side of open source for over 20 years, providing technical support, training, and general consulting in both the largest and smallest data centers.


Wednesday August 24, 2016 2:15pm - 3:05pm
Harbour B

Attendees (29)